procmail question
by Thomas Cameron
I'm reading articles saying procmail is dangerous and unmaintained
(https://anarc.at/blog/2022-03-02-procmail-considered-harmful/).
I get why a setuid root:mail binary is potentially dangerous, but
procmail has been in use for decades and I don't think I've ever heard
of it being used for an exploit except for waaaaay back in 2017 and 2014
(https://www.cvedetails.com/vulnerability-list/vendor_id-225/Procmail.html).
Anyone got any recommendations? I've used procmail for decades. I'm
pretty familiar with it. I *can* migrate to sieve, but procmail Just
Works(TM), so I'm hesitant.
Is the risk overblown? We're using Postfix and procmail and it seems to
be really solid. I am not really looking forward to migrating to sieve,
so I'd rather just stick with what I know, you know?
What are your thoughts?
--
Thomas
3 months, 2 weeks
Problem with chown
by Robert McBroom
While installing a virtual machine I get a message that the files cannot
be read by uid104,gid104 these correspond to qemu:qemu. Tried to use
chown to explicitly assign the directories to qemu:qemu but chown
doesn't recognize qemu as valid or the uid:gid combination. tried
setfacl to add qemu permission to read the files, There were no messages
but the virtual machine setup still could not read the files.
Any clues to what is going on?
3 months, 3 weeks
How do I read result of a QR Code
by ToddAndMargo
Hi All,
Fedora 39
I do not have a stinkin' smart phone.
I scanned a QR code to drive and read it with zbarimg.
(it is a security code so I doctored the result up a lot).
zbarimg Screenshot_2024-01-04_16-08-43.png
QR-Code:otpauth://abcd/efgh:123445566?secret=ABCDEFGHIJKLMNONP&issuer=abc...
scanned 1 barcode symbols from 1 images in 0.02 seconds
On a stinking smart phone, it brings back a six digit code.
How do I duplicate this in Fedora?
Many thanks,
-T
Is there a way to run Android apps on Fedora?
3 months, 3 weeks
double sided printing
by ToddAndMargo
Hi All,
How do I set up my new Brother HL-L2300D for
two sided printing?
-T
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3 months, 4 weeks
Unlock encrypted thumb drive with TPM?
by Chris Adams
I set up a thumb drive with an encrypted partition with LUKS2. When I
insert it, I get prompted for the password and that works. I'd like to
have it automatically opened when I insert it in my main computer, so I
used clevis to add a key using TPM2. I can successfully open it without
a password by running "clevis luks unlock -d /dev/sda1", but it doesn't
work automatically on insert. I'm running MATE desktop, and I made sure
clevis-udisks2 was installed (and I see it running); I thought that
should handle it, but I see log messages like:
n 18 12:01:13 audit[2424]: USER_DEVICE pid=2424 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=recovered-key-for uuid=6f23603a-982d-4dd1-ac5e-50237b016666 device="/dev/sda1" exe="/usr/libexec/clevis-luks-udisks2" hostname=? addr=? terminal=? res=failed'
Am I misunderstanding how this should work, do I need to do something
more, ??
--
Chris Adams <linux(a)cmadams.net>
3 months, 4 weeks
xfce: take a screenshot of a specific workspace from cli
by fedora＠eyal.emu.id.au
I am trying to track a strange issue(*1) and I want to take a screenshot of one workspace, periodically,
regardless of the current active one, from cli.
I looked at 'shutter'(*2) and 'spectacle' but I do not see an option to pick a specific one workspace (out of 12).
The workspaces are named by the default "Workspace 1" etc.
I want to capture the full desktop.
There is probably a way (from cli) to switch to the desired ws, take a ss and switch back. but this will interfere with my work.
Alternatively, I can probably use the window name and see when it starts failing.
I am on f38.
TIA
(*1) for the last few days Firefox seems to do things that I am sure I did not initiate.
One ff window (out of 4) on the desktop disappears, and another one, with one tab (the settings) changes from "Privacy & Security" to "General".
It happened a few times and I want to see when this happens, when the screen is locked or when it is active.
I never seen it happening when I am on the affected workspace, it is when I switch to this workspace that I notice it missing.
I do not see any crash messages in the logs.
(*2) 'shutter' is real trouble, many console messages. If I am on a ws without ff then it just hangs.
--
Eyal at Home (fedora(a)eyal.emu.id.au)
3 months, 4 weeks
gzip eps
by Patrick Dupre
Hello,
I am attaching an eps file
(NoDressedrecoil.eps)
You could do
cp -a NoDressedrecoil.eps No_Dressedrecoil.eps
cp -a NoDressedrecoil.eps No_Dressed_recoil.eps
and then
gzip -f No_Dressedrecoil.eps
gzip -f No_Dressed_recoil.eps
And you should obtain a different behavior
like
Traceback (most recent call last):
File "/usr/share/lyx/scripts/convertDefault.py", line 68, in <module>
if sys.argv[3] == 'ppm' and (im and version >= 0x060305 or gm):
^^^^^^^^^^^^^^^^^^^
TypeError: '>=' not supported between instances of 'str' and 'int'
This seems only due to the name No_Dressed_recoil.eps
Thank for your concerns
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
===========================================================================
4 months
github cloning from cmdline
by bruce
Hi.
I'm trying to test using SSH key to clone a test repository from the cmdline..
I'm screwing up something in following the different sires/examples to
try to setup the SSH key to connect to "Github" for a user/repository.
It appears that the "ssh -vT git(a)github.com" cmd seems to always
request a "passphrase" even though the ssh key was created without a
passphrase.
I've tried the following cmds on a number of different systems/OS,
with the same results.
the cmds are:
ssh-keygen -t ed25519 -C 'your(a)email.com' -f ~/.ssh/github/id_ed25519 -q -N ''
cat ~/.ssh/github/id_ed25519.pub
-- add the key to the github/ssh new key page
(if you notice, no PASSPHRASE)
the ssh private key file is added to the "config" file
ssh -vT git(a)github.com is run...
.
.
.
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/crawl_user/.ssh/id_ed25519_g
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Enter passphrase for key '/home/crawl_user/.ssh/id_ed25519_g':
debug1: No more authentication methods to try.
Permission denied (publickey).
which seems to ask for a passphrase!!
and then it dies..
I've tried various OS flavors...
looked over different sites..
Anyone with SSH/Fed/Github experience able to provide any thoughts/comments??
I'm sure I'm missing someting subtle, but I can't see it for now.
thanks
4 months
